CVE-2023-42576
CVSS 3.1 Score 6.8 of 10 (medium)
Details
Summary
CVE-2023-42576 is an authentication vulnerability affecting Samsung Pass prior to version 4.3.00.17. This issue allows physical attackers to bypass the authentication process due to an invalid exception handler. The vulnerability arises from improper authentication checks, enabling unauthorized access to devices linked to the Samsung Pass application. Attackers can exploit this weakness to gain access to sensitive information or perform unauthorized actions on compromised devices. Users are advised to update their Samsung Pass application to the latest version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Samsung
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions